Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.9

Linux-HA OCF agents may let local users gain privileges

CVE-2010-3389 · published 16 years ago
Summary

The SAPDatabase and SAPInstance scripts that come with version 1.0.3 of the Linux-HA OCF resource agents add an empty entry to the system's library search path. This mistake lets anyone with local access place a malicious library in the current folder and have it loaded, giving them elevated rights. Update to a newer version of the OCF resource agents or apply the vendor's patch to remove the empty entry.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
linux-ha ocf_resource_agents 1.0.3
cpe:2.3:a:linux-ha:ocf_resource_agents:1.0.3:*:*:*:*:*:*:*
Original advisory text
The (1) SAPDatabase and (2) SAPInstance scripts in OCF Resource Agents (aka resource-agents or cluster-agents) 1.0.3 in Linux-HA place a zero-length directory name in the LD_LIBRARY_PATH, which all...
The (1) SAPDatabase and (2) SAPInstance scripts in OCF Resource Agents (aka resource-agents or cluster-agents) 1.0.3 in Linux-HA place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
6.9 Medium
Exploitation
<1% chance of attack within 30 days
Timeline
Published20 Oct 2010
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2010-3389 · NVD
Track software like this
Free during beta